|
|
| (8 intermediate revisions by 2 users not shown) |
| Line 1: |
Line 1: |
| <!------------------------> | | <!------------------------> |
| <!-- do not remove this --> | | <!-- do not remove this --> |
| <div id="infra##" class="infra-insert"> | | <div id="Infra Insert 02" class="infra-insert"> |
| <!------------------------> | | <!------------------------> |
|
| |
|
| | | proxy_add_x_forwarded_for; </br> |
| '''Nginx Reverse Proxy Configuration'''
| | proxy_set_header X-Forwarded-Proto $scheme; |
| | |
| | |
| Add a nginx config file at "/etc/nginx/sites-available/<SERVERNAME>.conf". To do this use the commands:
| |
| | |
| '''$ cd /ect/nginx/
| |
| '''
| |
| | |
| '''$ nano sites-available/<NETNAME>.conf
| |
| '''
| |
| | |
| Ours looks like this:
| |
| | |
| '''$ cd /ect/nginx/
| |
| '''
| |
| | |
| '''$ nano sites-available/systerserver.conf
| |
| '''
| |
| | |
| Choosing your NGINX reverse proxy setup is very much up to you. You can create a simple one with just ''http'', and a more secure and standard one with ''https'' redirect and certificate.
| |
| | |
| Simple http configuration:
| |
| | |
| <pre>
| |
| server {
| |
| # listen to http on port 80
| |
| listen 80;
| |
| listen [::]:80;
| |
| # listen to url
| |
| server_name servpub.net;
| |
| | |
| # linking the client to the vpn subnet ip address of the pi
| |
| location / {<br>
| |
| proxy_set_header Host $host;
| |
| proxy_set_header X-Real-IP $remote_addr;
| |
| proxy_set_header X-Forwarded-For
| |
| $proxy_add_x_forwarded_for;
| |
| proxy_set_header X-Forwarded-Proto $scheme;
| |
| | |
| # replace this with the user vpn subnet ip address you set earlier
| |
| proxy_pass http://10.10.12.51;
| |
| proxy_read_timeout 90;
| |
| }
| |
|
| |
| location / {
| |
| rewrite ^ https://$host$request_uri? permanent;
| |
| }
| |
| }
| |
| </pre>
| |
| ''Fragment from Servpub Docs [see page 2]''
| |
|
| |
|
| <!------------------------> | | <!------------------------> |